Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/34352e3233302e3130302e302f32322d3234203d3e20323637313738.roa
File:                     34352e3233302e3130302e302f32322d3234203d3e20323637313738.roa (raw, json)
Hash identifier:          RaJzZI7Pj6+R9Os97oFxQdNs/RsS500u+Nj6LfKdXBs=
Subject key identifier:   E3:98:6D:02:3E:90:88:16:68:38:E8:3B:0D:45:6F:5B:0A:76:3C:29
Certificate issuer:       /CN=3095ECCF4DCDA7E651D1382D934C7147923F8C4E
Certificate serial:       76571157B1876322724B902EB4A8C94A886E99DB
Authority key identifier: 30:95:EC:CF:4D:CD:A7:E6:51:D1:38:2D:93:4C:71:47:92:3F:8C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/34352e3233302e3130302e302f32322d3234203d3e20323637313738.roa
Signing time:             Tue 07 Jul 2026 23:32:58 +0000
ROA not before:           Tue 07 Jul 2026 23:27:58 +0000
ROA not after:            Tue 06 Jul 2027 23:32:58 +0000
asID:                     267178
IP address blocks:        45.230.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.crl
                          rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 19:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:57:11:57:b1:87:63:22:72:4b:90:2e:b4:a8:c9:4a:88:6e:99:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3095ECCF4DCDA7E651D1382D934C7147923F8C4E
        Validity
            Not Before: Jul  7 23:27:58 2026 GMT
            Not After : Jul  6 23:32:58 2027 GMT
        Subject: CN=E3986D023E9088166838E83B0D456F5B0A763C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:f2:3f:1d:f8:3f:90:f1:74:01:5f:df:a7:
                    2d:12:a4:90:18:12:06:cf:b9:9f:05:5d:5c:98:4b:
                    be:03:fd:62:71:a2:d3:de:bf:34:67:71:62:19:6a:
                    e9:b8:5e:f9:ea:2b:16:0a:16:71:97:5d:8b:89:76:
                    fb:e3:8d:01:97:d5:83:13:b3:89:4a:df:0a:6c:34:
                    17:05:c7:97:6f:88:ec:d5:9b:c5:01:7d:a5:63:fd:
                    78:99:97:58:6c:ab:e0:82:cf:c1:90:56:11:e4:61:
                    41:29:40:c1:e2:5c:a1:9f:67:aa:d5:62:28:00:dc:
                    23:f1:24:c3:77:72:e6:01:a5:39:51:01:4c:ab:48:
                    35:4a:c1:79:e1:f7:0a:a5:ad:bd:71:18:f5:2b:6a:
                    6d:bb:e5:e7:9d:db:6f:f8:bd:59:6e:6d:a7:ac:db:
                    f4:bc:76:bd:15:df:68:68:09:01:c5:55:80:a4:54:
                    89:d4:d7:39:1e:aa:37:be:69:9a:b2:8c:05:55:57:
                    0a:7a:68:47:ff:48:14:54:2d:7e:22:c1:d9:8e:c3:
                    4f:77:df:da:5f:3c:3d:87:cb:4d:25:dc:5e:59:30:
                    f7:11:57:e8:d7:8f:f2:47:0f:03:84:8b:e3:fc:82:
                    0f:10:a6:37:90:e6:7d:93:e8:96:3e:dd:c1:a1:c5:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:6D:02:3E:90:88:16:68:38:E8:3B:0D:45:6F:5B:0A:76:3C:29
            X509v3 Authority Key Identifier:
                keyid:30:95:EC:CF:4D:CD:A7:E6:51:D1:38:2D:93:4C:71:47:92:3F:8C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3095ECCF4DCDA7E651D1382D934C7147923F8C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/34352e3233302e3130302e302f32322d3234203d3e20323637313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:d9:a6:68:bb:87:e3:d7:07:0a:88:e4:52:3b:be:d0:82:99:
         74:45:bd:57:ef:20:d1:24:e8:76:05:a2:85:6a:1e:48:56:d4:
         f6:d7:57:32:51:2c:cb:3d:4a:d1:7a:6f:c1:4a:68:83:de:38:
         f3:f8:7b:06:84:93:b9:fb:2b:bd:bd:5a:de:d2:03:60:16:3f:
         73:e9:f7:4d:5e:1a:dc:ca:58:a3:b2:96:c8:72:77:60:f1:ee:
         2e:08:fc:27:14:fc:50:50:34:fa:6f:76:b0:93:f6:2d:55:4b:
         ad:d8:7f:12:86:1b:1c:9e:2f:3f:c2:01:4e:5f:0d:43:ba:23:
         67:c2:97:3e:e6:40:82:cc:38:58:ad:21:64:a7:d7:65:a0:ba:
         93:28:f4:82:bf:bd:81:29:b8:b9:84:91:4d:ea:58:58:57:cd:
         c7:b4:da:74:b0:5d:02:b9:6b:08:5a:63:a2:d9:d4:e3:3a:c9:
         c8:bb:ed:45:de:0e:2f:7f:3b:c8:05:ea:83:ab:97:ba:e6:57:
         aa:cd:e5:3b:27:51:ae:8b:cd:dd:9f:05:2d:fd:f3:2b:cc:52:
         ad:04:7d:1f:e5:57:20:2c:5c:06:2a:9b:c9:f7:5c:3d:9f:63:
         15:fd:6f:48:0d:2f:ce:f6:55:d8:60:12:dc:bd:7b:b5:2e:21:
         d3:23:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:19:45 2026 by rpki-client